Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
File:                     Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft (raw, json)
Hash identifier:          /JBZJgBY2kFDVfaN0BdIo41OTQIU6nMzVinY5a10rWI=
Subject key identifier:   BA:BD:2F:83:17:B0:BC:F0:56:61:BC:7A:2B:6C:E3:E2:AC:73:61:9F
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Certificate issuer:       /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial:       019FA22967ABC71750C35233824AC546271B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
Manifest number:          13CD
Signing time:             Mon 27 Jul 2026 06:00:50 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:50 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:50 +0000
Files and hashes:         1: 1m9vhqXwy7CGqJjqRjUuXJx7INY.roa (hash: qE04gkM/s7vX8p51u5m0unnrB0JoxCvsTSSShhmlhmI=)
                          2: G-RbIUzq1PlvE-q3SCybhunvJKI.roa (hash: opq2WoRARYg0RhIa4g9HMBvHxIPBPs39AMNusR3Lt3w=)
                          3: Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl (hash: xl92xId1soeqwpR9bQA/ArI8+/RwzAgJKe7X14zIbeg=)
                          4: SSSB_UVGJCKdh7PPz0qaSyXW7lc.roa (hash: CRGt/HquFvCmfw30kehUPdqDR7YReCJJSXwsQnL4oU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:67:ab:c7:17:50:c3:52:33:82:4a:c5:46:27:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
        Validity
            Not Before: Jul 27 06:00:50 2026 GMT
            Not After : Jul 28 06:00:50 2026 GMT
        Subject: CN=babd2f8317b0bcf05661bc7a2b6ce3e2ac73619f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:c3:9a:13:b6:d3:60:e5:3b:cb:8e:8e:92:
                    00:57:0f:f8:13:e4:0d:d0:88:dd:8b:3f:5c:c5:6d:
                    a5:d3:93:20:f8:03:51:13:50:89:3f:c0:71:3d:48:
                    66:b3:45:80:9f:8d:bb:d8:8d:2f:2c:60:d6:bb:4b:
                    60:75:a4:30:76:8f:05:10:5b:e1:ba:a8:a6:10:e3:
                    20:02:67:e7:a8:cf:c4:8e:2c:a7:5a:94:5e:50:60:
                    5f:63:f7:6d:9d:76:de:11:58:39:c7:37:be:cc:df:
                    a6:3a:d2:03:b5:1e:0e:03:c8:79:3b:39:f0:7e:98:
                    6d:4a:46:88:f1:a4:9d:d0:b4:25:68:49:cf:cb:23:
                    cd:47:86:35:78:45:3b:5d:82:16:a0:38:58:0d:56:
                    45:c3:fa:08:bb:5f:c3:8a:92:db:03:b3:ef:58:35:
                    a2:dc:60:de:e0:5f:16:8a:e4:71:92:72:68:43:aa:
                    e8:81:ef:21:95:be:74:07:b4:df:59:9e:57:3f:d6:
                    69:22:4c:6d:10:0c:ba:4c:1d:86:72:84:ff:97:ff:
                    d7:33:bb:24:b6:5e:27:4a:5e:09:13:02:5f:e6:00:
                    a4:ca:77:c3:80:02:f7:12:77:3a:e6:03:6f:d4:36:
                    b7:1c:29:0e:de:cb:38:57:ed:fc:49:23:73:5a:3b:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BD:2F:83:17:B0:BC:F0:56:61:BC:7A:2B:6C:E3:E2:AC:73:61:9F
            X509v3 Authority Key Identifier:
                keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:cb:0f:47:a2:c2:88:16:5b:0a:3c:c5:6a:9b:b7:0a:38:
         28:4a:d9:81:f3:62:22:e7:cd:84:08:8b:73:2e:84:6a:1f:31:
         14:ff:9b:bc:3f:0b:77:9b:b6:4a:af:fd:c6:56:75:6b:3c:28:
         ea:46:87:d3:d2:2a:f3:db:0d:d0:99:96:5a:d0:73:83:53:fd:
         55:ab:09:33:43:21:ee:27:c3:18:00:01:6d:68:36:65:96:fc:
         8a:e1:a5:01:7f:d3:5f:c2:05:08:fe:a1:e3:f3:96:7a:2d:10:
         7d:c5:d5:93:3f:c2:eb:0f:bd:ef:84:d0:a3:ca:3b:a4:30:63:
         89:48:64:1c:0d:0b:e6:e2:86:63:3d:d0:11:5a:dd:4a:c0:5d:
         f7:b4:91:58:16:89:95:e7:a6:65:c4:d5:99:e8:ac:19:a7:f4:
         e1:fd:0a:f1:ba:0f:90:32:02:a9:56:da:9a:ca:15:80:a2:65:
         19:21:6d:53:52:bf:3b:fa:3b:c6:01:3a:eb:c8:e3:48:b7:aa:
         d3:67:90:46:77:9b:6d:59:6b:f5:e8:bc:b2:ef:f6:b7:e0:6a:
         bf:4d:74:d3:17:cf:7a:98:5b:a7:c7:a5:79:76:9b:c3:ab:33:
         95:c5:d2:28:47:bb:d2:ff:2e:cf:db:7e:3f:0e:ab:ff:91:89:
         95:50:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:04 2026 by rpki-client